Security and privacy preserving approaches in the eHealth clouds with disaster recovery plan

Sahi, Aqeel; Lai, David; Li, Yan

doi:10.1016/j.compbiomed.2016.09.003

Cited by 44 publications

(16 citation statements)

References 35 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…They cannot resist the stolen‐verifier attack and man‐in‐the‐middle attack. Both Jiang et al scheme and Sahi et al scheme cannot resist the impersonation attack and achieve the non‐repudiation issue. Furthermore, Wu et al scheme cannot achieve the non‐repudiation protection, and Jiang et al scheme cannot resist the stolen‐verifier attack.…”

Section: Discussionmentioning

confidence: 99%

“…Their scheme does not consider the security issues and cannot propose a secure authentication scheme for telecare medicine information systems. In 2016, Sahi et al reviewed the related studies on security and privacy preservation, as well as disaster recovery in the E‐health cloud domain, and discussed how the integrated approaches and the disaster recovery can ensure the reliability and security of cloud projects. However, we found that the cloud computing of their scheme is too rough.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Design of a secure and effective medical cyber‐physical system for ubiquitous telemonitoring pregnancy

Chen

et al. 2017

Concurrency and Computation

View full text Add to dashboard Cite

In recent years, ubiquitous-based telemedicine has become increasingly popular in many countries; this is a new discipline that can break distance barriers in order to improve access to various medical services. Due to recent progress in telecare services, scientists provided those pregnant women with advanced medical care via medical cyber-physical systems (MCPS) to achieve eugenics. The MCPS presents a new level of integrated intelligence that is characterized by interaction and coordination of computing processes with physical processes. In an environment of MCPS, security is one of the key objectives for ubiquitous telemonitoring. In this paper, we take advantage of the cloud characteristics and the high efficiency of MCPS to achieve the desired medical monitoring and also to effectively protect pregnancy-related privacy. We establish a cloud computing platform for all users to access the cloud information at any time in accordance with their own demands. We also used cryptography to design the medical system. Identity-based combined encryption and signature cryptosystem were proposed as the best ways to ensure the security and privacy of healthcare data in the cloud. KEYWORDS cloud, IBCESC, medical cyber-physical system, pregnancy, ubiquitous telemonitoring | INTRODUCTIONWith the rapid development of technology and science, the world has entered into the information age. In this age, information technology has not only improved the efficiency of people's work but also changed people's production and lifestyle. The computer science is rapid development.Notations: ID x , the x's identity; data X , the xth patient's inspection data are generated by the doctor; data BS , the measured health data collected by the MMD; data HX , the xth health data created by the cloud; m D , the pregnant woman's health reports given by the doctor; m BS , the measured health information is collected by the body sensor; m Dr , the request message of the doctor; m W , warning message generated by the cloud; m c , medical certificate; m pi , the pregnant woman's health information; lm, the bit length of the message; r i , the ith random number; C p , the pregnant woman's health records; R p , the pregnant woman's health report generated by the doctor; Cert x , the x's personal identity certificate; G 1 , a cyclic additive group with order q; G T , a cyclic multiplicative group with the order q; e(), the pairing function e(): G 1 × G 1 ! G T ; H 1 (), the hash function H 1 () : {0, 1} * ! G 1 ; H 2 (), the hash function H 2 () : G T ! {0, 1} lm ; H 3 (), the hash function H 3 () : {0, 1} lm × {0, 1} lm ! Z q ; H 4 (), the hash function H 4 () : {0, 1} lm ! {0, 1} lm ; H 5 (), the hash function H 5 ðÞ : 0;

show abstract

Section: Discussionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Design of a secure and effective medical cyber‐physical system for ubiquitous telemonitoring pregnancy

Chen

et al. 2017

Concurrency and Computation

View full text Add to dashboard Cite

show abstract

“…The standards and guidelines related to health-information-system development were analyzed by Carvalho et al [4]. The security and privacy requirements for storing medical records in the Cloud from the perspective of healthcare providers and cloud-service providers were analyzed by Rodrigues et al [5] and by Sahi et al [6]. Rodrigues et al [5] concluded that storing EHRs in the Cloud means that precautions must be taken to ensure data security.…”

Section: Related Workmentioning

confidence: 99%

eHealth Integrity Model Based on Permissioned Blockchain

Hyla

Pejaś

2019

Future Internet

View full text Add to dashboard Cite

(1) Background: Large eHealth systems should have a mechanism to detect unauthorized changes in patients’ medical documentation, access permissions, and logs. This is due to the fact that modern eHealth systems are connected with many healthcare providers and sites. (2) Methods: Design-science methodology was used to create an integrity-protection service model based on blockchain technology. Based on the problem of transactional transparency, requirements were specified and a model was designed. After that, the model’s security and performance were evaluated. (3) Results: a blockchain-based eHealth integrity model for ensuring information integrity in eHealth systems that uses a permissioned blockchain with off-chain information storage was created. In contrast to existing solutions, the proposed model allows information removal, which in many countries’ eHealth systems is a legal requirement, and is based on a blockchain using the Practical Byzantine Fault Tolerant algorithm. (4) Conclusion: A blockchain can be used to store medical data or only security-related data. In the proposed model, a blockchain is mainly used to implement a data-integrity service. This service can be implemented using other mechanisms, but a blockchain provides a solution that does not require trusted third parties, works in a distributed eHealth environment, and supports document removal.

show abstract

“…Yaklaşımlar gerekli güvenlik ve gizlilik gereksinimlerini karşılamaktadır. Yaklaşımlardan herhangi birinin başarısız olması durumunda ise mekanizma verimli bir şekilde çalışmamaktadır [20]. Jun Zhou ve arkadaşlarının 2015 yılında yaptığı çalışma ile, dağıtılmış m-Sağlık bulut sisteminde belirtilen gizlilik ve güvenlik gereksinimini gerçekleştiren, yetkili erişilebilir gizlilik modeli ve hasta tarafından yönetilebilen çok seviyeli gizliliği koruyan kooperatif doğrulama şeması (PSMPA) önerilmiştir.…”

Section: E-sağlıkta Güvenlik çöZümleriunclassified

E-Sağlık ve Güvenlik: Riskler, Fırsatlar ve Çözüm Önerileri

Çoban¹,

Tüysüz²

2019

acperpro

View full text Add to dashboard Cite

ÖzetE-Sağlık; bilgi ve iletişim teknolojilerinin (BİT) sağladığı olanakların, hastalıkların teşhis ve tedavi edilmesi, sağlık hizmetlerine erişilebilirliğin arttırılması, sağlık sektöründe yer alan tüm paydaşlara kaliteli, verimli ve etkili sağlık hizmetlerin sunulması için kullanılmasıdır. E-Sağlık, sağlık hizmetlerini geliştiren ve kolaylaştıran avantajlara sahip olmasına rağmen, Elektronik Hasta Kayıtlarına (EHR) yetkisiz erişim, tıbbi verilerin gizliliği ve bütünlüğüne saldırı, sistem ve internet güvenliği sorunları gibi birçok güvenlik ve gizlilik sorunuyla karşı karşıyadır. Bu sorunlar, e-Sağlık sistemlerinin düzgün çalışmasını engelleyebilir ve sistem kullanıcılarına (hasta, doktor vs.) hatalı, eksik ve yanlış bilgiler verilmesine sebep olabilir. Bu durum tıbbi veri güvenliği için tehlike oluşturmaktadır. Bu nedenle e-Sağlık sistemlerinde güvenlik konusunun değerlendirilmesi büyük bir önem taşımaktadır. Bu çalışma kapsamında, e-Sağlıkta güvenlik konusu bilgi ve iletişim teknolojileri çerçevesinde ele alınmış, olası riskler ve fırsatlar göz önüne alınarak literatürde yapılan çalışmalar irdelenmiş ve gelecekte yapılması gereken öneriler okuyucuya sunulmuştur.Abstract E-Health is the use of information and communication technologies (ICT) facilities to diagnose and treat diseases, increase accessibility to health services, and provide quality, efficient and effective health services to all stakeholders in the health sector. Although E-Health has the advantages of improving and facilitating health services, it faces many security and privacy issues, including unauthorized access to Electronic Patient Records (EHR), intrusion and confidentiality of medical data, system and Internet security issues. These problems can prevent e-Health systems from functioning properly and cause system users (patients, doctors, etc.) to receive incorrect, incomplete or incorrect information. This is a danger to medical data security. For this reason, it is very important to evaluate the security issue in e-Health systems. Within the scope of this study, the subject of e-Health security has been handled within the framework of information and communication technologies, studies conducted in the literature have been examined by considering possible risks and opportunities, and the suggestions to be made in the future have been presented to the reader.

show abstract

Security and privacy preserving approaches in the eHealth clouds with disaster recovery plan

Cited by 44 publications

References 35 publications

Design of a secure and effective medical cyber‐physical system for ubiquitous telemonitoring pregnancy

Design of a secure and effective medical cyber‐physical system for ubiquitous telemonitoring pregnancy

eHealth Integrity Model Based on Permissioned Blockchain

E-Sağlık ve Güvenlik: Riskler, Fırsatlar ve Çözüm Önerileri

Contact Info

Product

Resources

About